CVE-2012-2753: Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpo...

Security readout for executives and security teams

This CVE affects older Check Point endpoint VPN client software. A local user could abuse how the GUI searches for DLL files to run malicious code with higher privileges. It is not described as remotely exploitable, but it matters on shared, unmanaged, or already-compromised endpoints. Exposure is most likely on legacy endpoints, old VPN client packages, gold images, or systems that still run the named Check Point remote access products. The structured affected-product list is incomplete, so validation should rely on product/version inventory and Check Point guidance. Address during legacy endpoint cleanup or VPN client modernization. Escalate priority where affected clients run on shared systems, administrator workstations, or environments with weak endpoint controls. Mitigation focus: Check Check Point advisory sk76480 for supported fixes or upgrade guidance.; Inventory endpoints for the named legacy Check Point VPN client versions.; Remove or upgrade unsupported Endpoint Connect and Remote Access Client installations..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.